-
Notifications
You must be signed in to change notification settings - Fork 208
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix the lease coordination table permissions #5097
Conversation
Signed-off-by: Souvik Bose <souvbose@amazon.com>
@@ -65,6 +74,10 @@ public Map<String, String> getStsHeaderOverrides() { | |||
return stsHeaderOverrides; | |||
} | |||
|
|||
public boolean isUseDefaultCredentials() { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We already have a concept of default
in the plugin configuration. So using "default" here is rather confusing.
Lines 12 to 13 in 81e4058
@JsonProperty("default") | |
private AwsStsConfiguration defaultStsConfiguration = new AwsStsConfiguration(); |
So I think we should use a different name here.
One idea: isUseDefaultCredentialsProvider
to clarify that this is coupled with the SDK's DefaultCredentialsProvider
.
Thoughts?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @dlvenable for your input. I will make the change.
@@ -49,6 +54,10 @@ public static AwsCredentialsOptions defaultOptions() { | |||
return DEFAULT_OPTIONS; | |||
} | |||
|
|||
public static AwsCredentialsOptions defaultOptionsWithDefaultCreds() { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
public static AwsCredentialsOptions defaultOptionsWithDefaultCreds() { | |
public static AwsCredentialsOptions defaultOptionsWithDefaultCredentialsProvider() { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @dlvenable. I have made the name change.
* @param useDefaultCredentials | ||
* @return The {@link Builder} for continuing to build | ||
*/ | ||
public Builder withUseDefaultCredentials(final boolean useDefaultCredentials) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
public Builder withUseDefaultCredentials(final boolean useDefaultCredentials) { | |
public Builder withUseDefaultCredentialsProvider(final boolean useDefaultCredentialsProvider) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @dlvenable. I have made the name change.
Signed-off-by: Souvik Bose <souvbose@amazon.com>
Description
This PR is to fix the credentials required for Lease Coordination table access. The fix is to use the default credentials instead of the pipeline role when Data Prepper would access the dynamoDb table.
Issues Resolved
Resolves #1082
Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.